$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: oQgXRieUpuFOzQYe98e4a83aK9XvbQvwRu7m7tgf2T4= Subject key identifier: 74:04:10:F5:A9:DC:B4:9D:C0:36:C9:F6:6E:B6:0E:87:7C:3F:56:6F Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 0478 Signing time: Sat 23 Aug 2025 00:20:40 +0000 Manifest this update: Sat 23 Aug 2025 00:20:40 +0000 Manifest next update: Sat 30 Aug 2025 00:20:40 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: CJU43gCLWnC+OB1Swq13wlovFbM4DYHRVmSdfrFxlCU=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Aug 23 00:20:40 2025 GMT Not After : Aug 30 00:20:40 2025 GMT Subject: CN=68a90958-4a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:8d:cc:25:a5:a1:e6:0b:44:40:97:08:44: 01:fc:e6:a1:03:0e:46:61:1d:88:a0:86:ee:48:f8: 61:c6:dd:c6:9f:3b:ac:3b:7e:76:75:41:f4:97:18: bf:d9:68:9a:cf:ea:f8:4e:db:4e:57:ca:bb:96:a7: db:f8:87:04:0f:2f:a9:9a:70:9e:df:41:0b:eb:2c: 82:45:b5:23:fd:d8:c8:f9:48:5f:f7:1c:33:d1:87: 56:21:06:34:b5:28:2f:75:5c:c2:d7:24:02:69:c5: 61:c2:5c:4c:93:dd:00:4a:7f:eb:2f:c5:1f:91:0e: 23:be:7f:01:df:9a:56:71:0c:6c:1a:6c:30:56:e3: 29:04:bb:25:6c:89:07:b3:67:f2:13:84:95:db:cb: 68:81:d2:64:44:a7:8f:02:6d:49:b7:91:fd:10:81: 67:51:71:a6:ad:a5:bf:4a:d7:6e:9c:46:82:a0:41: cf:28:52:5b:b4:60:96:50:60:2a:7f:c3:3a:a3:52: c2:d1:37:c1:a2:0e:c5:f9:d5:c3:ea:44:6b:d2:0c: e0:1b:b9:0c:a5:88:83:93:e9:c6:30:2b:19:c3:04: b2:83:e9:9e:43:55:82:d6:ae:31:14:8b:c4:60:29: 53:1b:0c:1c:ce:46:4d:c2:ed:97:e8:38:7a:bb:a0: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:10:F5:A9:DC:B4:9D:C0:36:C9:F6:6E:B6:0E:87:7C:3F:56:6F X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:71:0b:4d:10:b7:55:91:8e:77:6b:9c:b0:97:8c:85:1c:8b: e8:97:1c:25:96:0d:76:ee:81:09:f5:7e:97:91:f2:49:e0:8c: 79:1c:a6:d2:74:31:c8:9d:01:0f:bf:24:fb:2c:a4:c6:55:ff: 70:25:93:f6:1f:f7:7a:48:00:56:bb:24:67:5b:f9:ee:9d:8b: d8:03:d1:d8:93:b3:8d:a3:78:b2:0f:96:bf:c8:7e:f4:6a:2b: df:b7:75:dc:8d:03:04:5b:19:3c:2d:0e:e1:94:14:14:78:c8: 79:a7:61:f4:c6:42:ce:18:76:e5:9d:54:a6:49:b1:d3:a2:67: d7:72:bc:8f:e7:5e:1f:36:e2:15:5a:54:ae:c6:ed:9d:60:58: d9:3f:6a:a0:83:eb:1d:bf:f3:0f:c5:fe:d6:86:a3:01:55:a8: 4c:3a:b7:47:b4:76:d4:08:cb:04:b3:e5:78:53:2b:05:1e:40: e1:4a:32:53:aa:d0:99:ab:c6:30:f6:0f:e8:ea:2b:9a:4d:4c: c9:4f:a4:d0:90:9b:fb:6d:45:ab:dd:68:5a:c0:2c:da:f2:99: 40:f0:2a:4a:d7:ca:83:43:f8:14:31:dc:eb:b9:01:ca:90:53: 78:78:84:73:f6:df:bf:39:48:2d:57:14:e0:71:1b:e5:51:26: dc:40:8d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUwODIzMDAyMDQwWhcNMjUwODMwMDAyMDQwWjAYMRYwFAYD VQQDEw02OGE5MDk1OC00YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI2NzCWloeYLRECXCEQB/OahAw5GYR2IoIbuSPhhxt3GnzusO352dUH0lxi/ 2Wiaz+r4TttOV8q7lqfb+IcEDy+pmnCe30EL6yyCRbUj/djI+Uhf9xwz0YdWIQY0 tSgvdVzC1yQCacVhwlxMk90ASn/rL8UfkQ4jvn8B35pWcQxsGmwwVuMpBLslbIkH s2fyE4SV28togdJkRKePAm1Jt5H9EIFnUXGmraW/StdunEaCoEHPKFJbtGCWUGAq f8M6o1LC0TfBog7F+dXD6kRr0gzgG7kMpYiDk+nGMCsZwwSyg+meQ1WC1q4xFIvE YClTGwwczkZNwu2X6Dh6u6D6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQEEPWp 3LSdwDbJ9m62Dod8P1ZvMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEcQtNELdVkY53a5ywl4yFHIvolxwllg127oEJ9X6XkfJJ4Ix5HKbS dDHInQEPvyT7LKTGVf9wJZP2H/d6SABWuyRnW/nunYvYA9HYk7ONo3iyD5a/yH70 aivft3XcjQMEWxk8LQ7hlBQUeMh5p2H0xkLOGHblnVSmSbHTomfXcryP514fNuIV WlSuxu2dYFjZP2qgg+sdv/MPxf7WhqMBVahMOrdHtHbUCMsEs+V4UysFHkDhSjJT qtCZq8Yw9g/o6iuaTUzJT6TQkJv7bUWr3WhawCza8plA8CpK18qDQ/gUMdzruQHK kFN4eIRz9t+/OUgtVxTgcRvlUSbcQI0a -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:31 2025 by rpki-client